Agentweaver

⚠️ Alpha software. Agentweaver is under active development. Expect breaking changes, incomplete features, and rough edges. Not intended for production use.

Agentweaver runs an AI agent on a task inside a sandboxed git worktree, streams every step live, and waits for human review before anything merges.

📖 Read the docs at sabbour.me/agentweaver — or browse the source in docs/index.md

Features

• Sandboxed execution — every agent run lives in an isolated git worktree with Kata VM isolation on AKS

• Live streaming — watch every agent step, tool call, and file change in real time

• Human-in-the-loop review — nothing merges until you approve the assembled diff

• Sandbox browser preview — open a live in-browser preview of the app running inside a run's sandbox (port-forward)

• MCP server — expose Agentweaver runs and outcomes as MCP tools for Claude Desktop and compatible clients

Related MCP server: openclaw-tools-mcp

Quick start

Local dev — one command:

curl -fsSL https://raw.githubusercontent.com/sabbour/agentweaver/main/install.sh | bash

irm https://raw.githubusercontent.com/sabbour/agentweaver/main/install.ps1 | iex

Deploy to AKS — one command (requires az login + kubectl + envsubst + openssl):

curl -fsSL https://raw.githubusercontent.com/sabbour/agentweaver/main/install.sh | bash -s -- --aks

& ([scriptblock]::Create((irm 'https://raw.githubusercontent.com/sabbour/agentweaver/main/install.ps1'))) -Aks

AKS flags: --skip-postgres / -SkipPostgres and --skip-oauth-key / -SkipOauthKey skip optional provisioning steps if those resources already exist.

Windows (PowerShell):

.\install.ps1            # local dev — checks prereqs, installs deps, launches start-dev.ps1
.\install.ps1 -Aks       # AKS deploy (requires WSL2 + az login + kubectl)

macOS / Linux (bash):

bash install.sh          # local dev — checks prereqs, installs deps, prints start commands
bash install.sh --aks    # AKS deploy (requires az login + kubectl + envsubst + openssl)

Build & deploy

Local build

# Build the .NET solution
dotnet build agentweaver.sln

# Build the web frontend
npm --prefix apps/web run build

Run locally

Start each component from the repo root (three terminals):

# Terminal 1 — API backend
dotnet run --project apps/Agentweaver.Api

# Terminal 2 — MCP server (optional)
dotnet run --project apps/Agentweaver.Mcp

# Terminal 3 — Web UI (Vite dev server, hot reload)
npm --prefix apps/web run dev

Windows shortcut: .\start-dev.ps1 launches all three automatically.

Configure the GitHub OAuth client secret for local dev with .NET user-secrets (do not put it in appsettings*.json):

cd apps/Agentweaver.Api
dotnet user-secrets set "Auth:GitHub:ClientSecret" "<your-oauth-app-client-secret>"

Deploy / redeploy to AKS

First deploy:

curl -fsSL https://raw.githubusercontent.com/sabbour/agentweaver/main/install.sh | bash -s -- --aks

Redeploy with a new image tag (build, push, and redeploy in one command):

bash install.sh --aks --image-tag <git-sha>

.\install.ps1 -Aks -ImageTag <git-sha>

Never use :latest. The default tag is the short git SHA (git rev-parse --short HEAD). Always pin to a specific SHA for reproducible deployments. Image tags are immutable per build.

Key docs

• Getting started

• API reference

• MCP server reference

• Architecture overview